Concepts of risk management in the health care industry